CVE-2026-8243
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A vulnerability was found in IAS Canias ERP 8.03 in the JNLP Deployment Endpoint component. An unknown function allows remote exploitation of a hard-coded cryptographic key. The vendor did not respond.
Risk Assessment
An attacker can remotely decrypt sensitive data or impersonate the system, leading to confidentiality and integrity breaches.
Recommendation
Contact the vendor immediately for a patch or consider replacing the system with an alternative solution.
Original NVD description (English source)
A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. This affects an unknown function of the component JNLP Deployment Endpoint. Executing a manipulation can lead to use of hard-coded cryptographic key . The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.